$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: h9yv163PTc/XAtpBSvyfDQIAHQi9UXufFSWrICo79i8= Subject key identifier: 84:CA:F2:7C:CC:F7:BC:86:45:3E:03:E4:BC:F4:2E:08:FA:16:1D:2F Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 125B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 1229 Signing time: Thu 26 Mar 2026 17:06:58 +0000 Manifest this update: Thu 26 Mar 2026 17:06:58 +0000 Manifest next update: Thu 02 Apr 2026 17:06:58 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: ygbrfDIjOSugMjmIHyiyPrh+lscbQ+3NzHnUIZA6AtE=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4699 (0x125b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Mar 26 17:06:58 2026 GMT Not After : Apr 2 17:06:58 2026 GMT Subject: CN=69c567b2-9c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:12:06:f2:ae:de:82:f2:a3:b7:60:3b:00: de:5c:59:c5:33:3c:42:52:23:59:ff:71:47:85:50: 07:6b:7a:03:13:0c:b1:fb:11:28:16:23:5b:9a:9a: 1e:0a:49:42:98:8b:e3:05:86:62:70:78:3f:f8:2b: 6a:ca:54:b3:9d:d1:a4:94:87:a6:27:c1:dc:23:40: 7f:6b:c0:ea:93:8c:ad:2a:ba:bb:36:7d:4a:a3:0e: 11:4f:d2:56:2b:46:cb:2d:0f:01:0d:3a:84:39:ed: cc:87:12:f5:d9:58:47:9c:a2:29:ec:81:b2:9e:5a: 75:d3:b3:a9:30:c4:c5:63:40:2f:90:86:c9:0f:de: 57:22:99:e6:00:fe:a3:7f:20:89:59:0d:f0:a8:d2: c3:1b:53:a7:cf:3d:50:68:0e:40:08:1f:44:5d:56: 88:7f:2e:3b:bf:cc:26:d7:42:de:70:e9:6f:14:53: c8:d4:36:c8:44:fc:41:b3:18:e0:99:ba:f5:51:df: c9:50:59:a2:b2:03:23:4a:f8:85:b3:28:80:71:69: 11:41:2b:f6:13:e0:5c:f2:ee:3f:f2:c0:9e:4e:88: 6d:5b:08:83:73:17:09:92:27:6b:dc:cf:b5:4c:82: 52:66:54:4e:b5:c2:89:f7:5b:a9:df:26:19:34:5c: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CA:F2:7C:CC:F7:BC:86:45:3E:03:E4:BC:F4:2E:08:FA:16:1D:2F X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7c:80:a7:57:06:dc:95:68:65:b2:d3:ec:30:a3:75:c9:a6: 38:f3:bb:80:03:78:87:38:2b:d8:0a:b3:ed:85:fa:cd:2f:0c: b2:f5:54:d0:c6:30:2e:69:84:09:72:ee:ff:83:b9:d1:af:b4: 52:ef:32:87:f9:40:74:ad:f7:02:f4:15:0f:f8:1f:2e:40:bd: e5:f3:2b:98:e9:1e:20:37:d4:5c:8b:dc:80:ad:b3:b5:48:79: aa:43:98:bd:09:ec:49:f6:e0:67:6b:1e:6f:29:c4:6c:31:68: 20:4d:81:bc:76:b5:8c:c1:02:65:58:3b:e1:d8:dd:e3:32:9a: 15:c2:e1:31:4a:b9:57:69:11:32:38:e0:72:24:c7:a4:eb:68: 60:18:64:6d:b2:8d:dc:2c:42:74:4c:44:ff:9b:2a:83:17:7c: bf:8e:35:86:1d:98:d9:e1:d5:6f:8e:59:39:67:30:f9:b2:7d: 70:24:b3:cf:f9:3d:d9:48:d2:be:0b:46:d9:24:63:56:41:85: 2d:fe:e4:98:50:b6:fc:78:97:8e:b4:68:27:cc:3b:5c:85:c9: 90:79:54:3a:0c:7c:8a:1e:35:aa:63:60:ae:f2:51:80:f7:a5: 98:cc:a3:87:ad:f7:37:73:a5:b1:1f:a6:93:c8:34:be:58:6f: c5:75:45:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICElswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjYwMzI2MTcwNjU4WhcNMjYwNDAyMTcwNjU4WjAYMRYwFAYD VQQDEw02OWM1NjdiMi05YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGASBvKu3oLyo7dgOwDeXFnFMzxCUiNZ/3FHhVAHa3oDEwyx+xEoFiNbmpoe CklCmIvjBYZicHg/+CtqylSzndGklIemJ8HcI0B/a8Dqk4ytKrq7Nn1Kow4RT9JW K0bLLQ8BDTqEOe3MhxL12VhHnKIp7IGynlp107OpMMTFY0AvkIbJD95XIpnmAP6j fyCJWQ3wqNLDG1Onzz1QaA5ACB9EXVaIfy47v8wm10LecOlvFFPI1DbIRPxBsxjg mbr1Ud/JUFmisgMjSviFsyiAcWkRQSv2E+Bc8u4/8sCeTohtWwiDcxcJkidr3M+1 TIJSZlROtcKJ91up3yYZNFwxjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFITK8nzM 97yGRT4D5Lz0Lgj6Fh0vMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjXyAp1cG3JVoZbLT7DCjdcmmOPO7gAN4hzgr2Aqz7YX6zS8MsvVU0MYwLmmE CXLu/4O50a+0Uu8yh/lAdK33AvQVD/gfLkC95fMrmOkeIDfUXIvcgK2ztUh5qkOY vQnsSfbgZ2sebynEbDFoIE2BvHa1jMECZVg74djd4zKaFcLhMUq5V2kRMjjgciTH pOtoYBhkbbKN3CxCdExE/5sqgxd8v441hh2Y2eHVb45ZOWcw+bJ9cCSzz/k92UjS vgtG2SRjVkGFLf7kmFC2/HiXjrRoJ8w7XIXJkHlUOgx8ih41qmNgrvJRgPelmMyj h633N3OlsR+mk8g0vlhvxXVFYg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:47:06 2026 by rpki-client